Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-abNXBIzx5BKjIo8E3vyi_jFoWI.roa
File:                     1-abNXBIzx5BKjIo8E3vyi_jFoWI.roa (raw, json)
Hash identifier:          idYnMUSKb/JRaX9yLrXkxNrGdldWt9zSS1t/xK6Ekg4=
Subject key identifier:   F9:A6:CD:5C:12:33:C7:90:4A:8C:8A:3C:13:7B:F2:8B:F8:C5:A1:62
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       01856E8B2937E52617C3ACF964583F754ED5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-abNXBIzx5BKjIo8E3vyi_jFoWI.roa
Signing time:             Sun 01 Jan 2023 18:14:51 +0000
ROA not before:           Sun 01 Jan 2023 18:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212728
IP address blocks:        185.236.9.0/24 maxlen: 24
                          2a09:ff00:8000::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:8b:29:37:e5:26:17:c3:ac:f9:64:58:3f:75:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan  1 18:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9a6cd5c1233c7904a8c8a3c137bf28bf8c5a162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:84:38:30:f2:2d:0f:f5:39:ee:6c:98:31:
                    8f:08:33:8c:7f:a2:12:f1:31:42:c3:4c:60:17:e4:
                    55:ab:9d:3a:02:5e:3b:50:1e:25:99:07:75:e3:dc:
                    b0:0c:cb:87:f8:a7:32:18:6c:ce:08:34:35:cf:25:
                    63:7a:a6:52:2d:e7:1e:8f:d4:d7:c1:45:7d:97:1b:
                    3d:16:54:bb:d9:66:c8:5f:97:ec:9d:d0:26:f2:f8:
                    ad:9f:21:7c:16:0c:df:ff:2f:c2:4b:39:a0:fa:d3:
                    21:da:91:0a:ce:79:8b:d6:d1:84:98:9b:13:12:42:
                    6e:7b:6f:2c:46:89:ff:f7:24:0f:a7:dd:67:22:5e:
                    93:25:f0:54:ab:85:9b:63:a8:89:e2:57:8e:2d:a2:
                    ff:f0:7d:3e:49:9d:2f:0e:a1:09:97:26:12:6f:6f:
                    64:e9:ea:d6:be:89:8b:72:7a:8f:23:80:a8:2a:09:
                    bb:6f:8a:bf:e6:34:48:36:f9:1e:e8:66:63:4e:0b:
                    c4:23:fc:8c:b6:04:d2:03:ea:e2:9b:47:d5:f8:a5:
                    04:c7:f9:a8:0d:16:6b:62:bf:03:c0:ec:c4:e8:95:
                    cf:e5:7b:56:e4:ea:2e:c2:89:ea:43:e0:cd:51:6e:
                    02:b4:51:2e:61:92:d7:12:7f:aa:3b:c3:98:9b:d1:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:CD:5C:12:33:C7:90:4A:8C:8A:3C:13:7B:F2:8B:F8:C5:A1:62
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-abNXBIzx5BKjIo8E3vyi_jFoWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.9.0/24
                IPv6:
                  2a09:ff00:8000::/37

    Signature Algorithm: sha256WithRSAEncryption
         4d:b2:79:ed:61:f6:ab:e4:3c:33:0e:5b:17:c2:ab:ec:f2:4b:
         fd:fe:9e:61:e2:6f:6a:e4:4c:9a:e1:69:89:11:b1:de:e7:b9:
         d8:ae:16:f6:85:81:ac:25:d7:7c:7b:bc:f8:20:d8:a8:12:fd:
         d9:62:c1:40:bc:ef:07:59:e0:4d:00:40:48:79:00:a5:51:8b:
         55:78:d3:74:97:2b:31:3e:fd:c2:f2:59:92:7e:4c:2d:24:9d:
         49:03:73:6f:3c:7a:b8:37:5a:a2:0b:5c:24:88:2e:ef:89:e1:
         00:4d:f0:d5:98:63:42:41:b5:ce:c6:5e:d0:64:c2:ad:36:86:
         af:e8:34:0c:c5:cd:ef:be:4a:b8:50:63:b3:17:10:e9:37:23:
         f4:dc:14:90:43:ab:c5:ba:9e:32:f8:4b:e3:a3:36:34:32:b3:
         94:c2:dd:14:87:e1:a0:39:be:e2:e2:67:1b:93:30:9f:76:09:
         1a:93:9c:8a:7c:48:a8:4b:55:a8:6b:ed:0f:e5:d1:0c:6a:14:
         a8:79:0d:8e:e4:15:f7:d4:74:aa:fe:19:9a:77:32:24:f2:96:
         2f:1a:da:04:3c:be:7e:74:2f:ff:bf:47:50:25:d3:29:02:b0:
         7a:31:55:7d:12:8f:54:ae:19:d5:5e:5e:72:90:ae:e7:52:15:
         e0:1c:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----